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■*^ I Abstract 

^O I We present a new example of a partial boolean function whose one-way quantum communi- 

^^ ' cation complexity is exponentially lower than its one-way classical communication complexity. 

,__i I The problem is a natural generalisation of the previously studied Subgroup Membership prob- 

,S^ • lem: Alice receives a bit string x, Bob receives a permutation matrix M, and their task is 

Mh| to determine whether Mx = x or Mx is far from x. The proof uses Fourier analysis and an 

-<— > ■ inequality of Kahn, Kalai and Linial. 

C ■ 
C^ ■ 
^ ■ 

O^! 1 Introduction 

en ■ The framework of communication complexity [26^ [17] has become an exceptionally successful setting 

J^ , in which to prove concrete lower bounds. The special case where the communication is one-way is 

QQ I one of the simplest models of communication complexity, and yet is one of the most important, in 

'^ ' particular because of its applications to lower bounds on data structures and one-pass streaming 

; . algorithms |171 HI |20]. In this model, there are two parties, Alice and Bob, each of whom receives 

^^ I an input {x and y, respectively). Their goal is to compute a boolean function f{x,y) with success 

Q ' probability at least 1 — e, for some constant e (usually, e = 1/3). To do so, Alice prepares a 

^-H . message, which may depend on x and a random string r (which does not depend on x). She then 

^ ', sends Bob the message. Based on the message, his input y and his own string of random bits. Bob 

'k^ I attempts to output f{x,y). The one-way communication complexity of / is the minimum length 

^ ' of a message that Alice must send, in order that Bob can achieve success probability at least 1 — e. 

. 5t , Note that changing e to another constant strictly less than 1/2 can only change the communication 

complexity by a constant factor. 

In a variety of other models of communication complexity, it is known that sending quantum 
messages can allow Alice and Bob to drastically reduce the amount of communication required 
[SI [22| [7]. However, in the most natural case where / is a total function (i.e. there is no promise 
on Alice and Bob's inputs) it is still unknown whether quantum communication can reduce the 
one-way communication complexity by more than a factor of 2 [23]. On the other hand, in the case 
of partial functions (where there is a promise on the inputs), it is known that the separation can be 
exponential |13[ \9\ \W\. Unfortunately, an exponential separation has been shown for only one or 
two partial functions. The first separation was shown for variants of the so-called Boolean Hidden 
Matching problem (see Section [L3] for a definition of one such variant). This problem was originally 
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conjectured to give such a separation by Bar-Yossef, Jayram and Kerenidis [3], who indeed write 
(with respect to a closely related problerclj) "This problem is new and we believe that its definition 
plays the major role in obtaining our result". 

It is therefore of great interest to find other problems which demonstrate a separation between 
quantum and classical one-way communication complexity. In this paper, we will be concerned 
with the following partial boolean function. 



Definition 1 (Perm-Invariance). 

The Perm-Invariance problem is defined as follows, in terms of a parame- 
ter (3. 

• Alice gets an n-bit string x. 

• Bob gets an n X n permutation matrix M. 



• Bob has to output < 



1 if Mx = X 

if d(Mx,x) > /3|x| 

anything otherwise. 



Here \x\ is the Hamming weight of x, and d{Mx,x) = \Mx + x\ is the Hamming distance 
between Mx and x. There is a simple O(logn) qubit bounded-error one-way quantum protocol 
for this problem. Alice sends Bob the state {t/jx) = , — Yli x-=i N)' ^^*^ -^°^ attaches an ancilla 

qubit in the state ^(|0) + |1)). He then applies a controlled-M operation (controlled on the ancilla 
qubit) to produce the state -j=[\0)\ipx) + \l)\'>pMx))- Next he performs a Hadamard operation on 
the ancilla, then measures it. It is easy to verify that the measurement result is with probability 
^ + ^(i^xli'Mx) = 1 — d{M X , x) / {4\x\) , which is equal to 1 if Mx = x, and at most 1 — /3/4 if 
d{Mx,x) > (3\x\. For constant /3, it suffices to repeat this protocol a constant number of times to 
determine which is the case with an arbitrarily high constant probability of success. 
Our main result is the following theorem. 

Theorem 1. Any one-way classical protocol that solves Perm-Invariance with f3 = 1/8, and a 
constant success probability strictly greater than 1/2, must communicate at least il(n'^' ^^) bits. 

We therefore have an exponential separation between quantum and classical one-way commu- 
nication complexity for this problem. We conjecture that this lower bound is not tight, and the 
correct bound is Q(^/n). This would be tight by a result of Raz [22] that any partial function 
with an O(logn) qubit bounded-error one-way quantum protocol has an 0{y/n) bit bounded-error 
one-way classical protocol. 

1.1 Connection to Subgroup Membership 

Subgroup Membership [23^ |T] is a problem which has been conjectured to give an asymptotic 
separation between quantum and classical one-way communication complexity for a total function. 
The problem is defined below, in terms of a group G. 
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Definition 2 (SUBGROUP Membership [IJ). 

The Subgroup Membership problem is defined in terms of a group G, as 
follows. 

• Alice gets a subgroup H <G. 

• Bob gets an element g £ G. 

• Bob has to output 1 if g G H, and otherwise. 



There is an easy one-way classical protocol for Subgroup Membership that uses 0(log^ |G|) 
bits of communication, and it has been conjectured [l] that for certain groups G this protocol is 
optimal. On the other hand, there is a one-way quantum protocol that uses only 0(log |G|) qubits of 
communication, so this would imply a quadratic separation between one-way quantum and classical 
communication complexity for a total function. A difficulty with proving this conjecture is that the 
particular structure of G plays a role in the complexity of solving SUBGROUP Membership, and 
indeed for certain groups there does exist a 0(log |G|)-bit classical protocol for the problem [1]. 

Subgroup Membership is a special case of Perm-Invariance. To see this, note that if Ahce 
gets a |G| bit string x which is indexed by elements of G, and takes the value 1 on elements y £ H, 
and Bob's permutation M corresponds to the map that sends elements z G G to gz £ G, then 
g £ H \i and only if Mx = x. Otherwise, d{Mx,x) = 2\x\. The Perm-Invariance problem is 
thus a natural generalisation of Subgroup Membership, which removes the group structure (at 
the expense of having to put in the promise that d{Mx, x) is large "by hand" rather than having 
it guaranteed by the axioms of group theory). This lack of structure perhaps accounts for the fact 
that an exponential quantum-classical separation can be proven for this more general problem. 

1.2 Proof technique 

In order to prove Theorem [H we restrict to the following, potentially simpler problem. 



Definition 3 (PM-Invariance). 

The PM-Invariance problem is defined as follows. 

• Alice gets a 2n-bit string x such that \x\ = n. 

• Bob gets a 2n X 2n permutation matrix M, where the permutation entirely 
consists of disjoint transpositions (i.e. corresponds to a perfect matching on 
the complete graph on 2n vertices). 



Bob has to output < 



1 if Mx = X 

li d{Mx,x) >n/ 

anything otherwise. 



The constant /3 = 1/8 is essentially arbitrary here and is an artifact of the proof technique. 



Note that for odd n the problem is trivial, as it is impossible that Mx = x. For the rest of the 
paper, we therefore assume that n is even. 

Theorem [1] is immediate from the following result. 

Theorem 2. Any one-way classical protocol that solves the PM-lNVARlANCE problem and commu- 
nicates at most n^' "'^^/(eln2) — O(logn) bits can achieve a success probability of at most 0.79 + o(l). 

The following explicit one-way classical protocol for the PM-Invariance problem achieves 
a constant success probability using 0{n^''^) bits of communication: Alice simply sends Bob a 
randomly selected 0{n^''^) bits of her input x (using shared randomness to select the bits, which 
by Newman's theorem can be replaced with private randomness with a negligible overhead [17j). 
By the birthday paradox, with constant probability Bob's permutation M will interchange at least 
two of the bits that Alice sent. If Mx = x, then these bits will always be equal. However, if 
d{Mx, x) > n/8, then with constant probability the bits will not be equal. A constant number of 
repetitions therefore suffices to distinguish these cases with any desired constant probability. 

The overall technique used to prove Theorem [2] is common to other works that separate quantum 
and classical one-way communication complexity |13t[9t[T0]. We fix two "hard" distributions "Dq, Pi 
on the zero/one- valued inputs respectively, and show that for any short message from Alice to Bob, 
Bob does not get enough information to be able to distinguish between the induced distributions 
on his own inputs. 

The main technical tool used is Fourier analysis, and in particular the Fourier spectrum in- 
equality of Kahn, Kalai and Linial [12j (the KKL Lemma), which has found many applications 
in computer science, and specifically to communication complexity [211 113^ [TO]. The relevance of 
Fourier analysis is as follows. A short message from Alice specifies a large subset S of her inputs. 
Let Vf denote Bob's induced distribution on one-valued inputs, given that Alice's input is in S. In 
the case of the PM-Invariance problem, it turns out that the distance of Vf from the uniform 
distribution can be upper-bounded by looking at the Fourier transform of /, the characteristic 
function of S. 

There are several technical ingredients that need to go into this. First, we use the KKL Lemma 
to bound the Fourier weight of / (Lemma [9]). The bound for the distance of Vf from the uniform 
distribution turns out to depend on Krawtchouk polynomials fl9| [16] , and the second ingredient 
is the use of upper bounds on these polynomials. The final ingredient is the use of a number of 
inequalities and identities involving perfect matchings and binomial coefficients. 

1.3 Relation to previous work 

Prior to this work, the only known exponential separation between one-way quantum and classical 
communication complexity for a (partial) boolean function was a result of Gavinsky, Kempe and 
de Wolf [9j, and independently Kerenidis and Raz [13], on (variants of) the so-called Boolean Hid- 
den Matching problem. These works were later combined as [lOj. The Boolean Hidden Matching 
problem was originally defined by Bar-Yossef, Jayram and Kerenidis [3], who also proved an expo- 
nential separation for a related relational problem called the Hidden Matching problem [3]. The 
variant of Boolean Hidden Matching for which a lower bound was proven in [TO] is called o-Partial 
Matching, and is given below. Gavinsky et al show in |10j that, for any < a < 1/4, any classical 
one-way bounded-error protocol for the a- PARTIAL MATCHING problem must communicate at least 
fl{^^/n/a) bits, whereas there is a quantum protocol that transmits only 0((logn)/a) bits, thus 
proving an exponential separation for constant a. The separation we give here for PM-Invariance 
is not quite as large (and we conjecture it is not tight; see Section [6]). 



Definition 4 (o-Partial Matching [TU]). 

The a-PARTiAL Matching problem is defined as follows. 

• Alice gets an n-bit string x. 

• Bob gets an an x n matrix M over F2, where each row contains exactly two 
Is, and each column contains at most one 1, and a string w G {0, 1}"". 



Bob has to output < 



if Mx = w 

1 ifMx = w + 1"" 
^ anything otherwise. 



The PM-Invariance problem can be rephrased to seem quite similar to 1/2- Partial Match- 
ing. Rewrite Bob's permutation matrix M as an n x 2n matrix N such that the i'th row corresponds 
to the i'th pair of elements {ai,bi) swapped by the permutation, and contains Is in columns Oj and 
bi (and is zero elsewhere). Then it is easy to see that d{Mx,x) = 2|A^2;|, and the PM-Invariance 
problem reduces to distinguishing between the cases |A^x| = 0, |A^2;| > n/16. So the main difference 
between a-PARTiAL Matching and PM-Invariance is the relaxation of the promise on Bob's 
input, by removing the string w. 

This relaxation is then the main motivation for this work. First, this allows a quantum-classical 
separation to be proven for a direct and natural generalisation of Subgroup Membership; it is 
not clear that a similar connection exists between a-PARTiAL Matching and Subgroup Mem- 
bership. Second, relaxing the promise reduces the gap between partial functions (for which we 
have an exponential separation) and total functions (for which the best known separation is only 
constant). Third, given the dearth of quantum-classical communication complexity separations, it 
seems to be of interest to generalise and extend any known separation as far as possible. 

The apparently minor change from a-PARTiAL MATCHING to PM-Invariance seems to in- 
crease the difficulty of proving a communication complexity lower bound. Previous proofs of the 
lower bound on q-Partial Matching work by showing that, for some initial distribution on the 
inputs, Bob's induced distribution on the string Mx is close to uniform, and thus it is hard for 
him to distinguish the cases Mx = w and Mx = w + 1"". For the PM-Invariance problem this 
approach does not seem to work, and it appears necessary to work directly with Bob's distribution 
on M (rather than Mx). We thus obtain a fourth motivation: the development of techniques which 
may be of use elsewhere. 

Many of the ingredients used in the beautiful proofs of the lower bound on ck-Partial Match- 
ing given in [13l [10] also appear in the present paper, and in particular these previous papers 
also make use of Fourier analysis and the KKL Lemma (indeed, the third proof in ^ also does so 
implicitly, via a lemma of Talagrand). However, the PM-lNVARiANCE problem presents us with 
two further technical challenges. First, it seems essential to find a bound on the Fourier weights of 
a boolean function that applies at both low and high levels. Second, we need to carefully bound 
some expressions involving Krawtchouk polynomials and binomial coefficients, in order to get a 
non-trivial final result. 

Following the completion of this work, it was shown by Klartag and Regev [14J that one-way 
quantum communication can be exponentially stronger than even two-way classical communica- 



tion. The problem they used to demonstrate this is complete for one-way quantum communication 
complexity. 

We also note that the problem considered here is a very special variant of a partial function 
termed Pi, which Raz f22j used to give the first exponential separation between quantum and 
classical two-way communication complexity for a partial boolean function. In this problem, Alice 
gets a unit vector x and two orthogonal subspaces Sq, Si, and Bob gets an orthogonal matrix T. 
Their goal is to answer if Tx is within constant distance of Sq, and 1 if Tx is within constant 
distance of Si. 

The rest of the paper is devoted to the proof of Theorem [2j In Section [21 we prove a general 
lemma relating communication complexity to distinguishability of probability distributions. Sec- 
tions [3] and H] contain the combinatorial and Fourier-analytic results we need for the proof, the heart 
of which finally appears in Section [5j We finish with some concluding remarks in Section [6l 

1.4 Miscellaneous notation 

We often use the notation [E] for a term which evaluates to if the expression E is false, and 1 if 
E is true. The ii distance between two vectors p, q is defined as ||p — g||i = X^j \pi — qi\- [n] denotes 
the set {1, . . . ,n}, and S^ denotes the complement [n]\S of the set S in [n]. We will continue to 
associate permutations of 2n elements which entirely consist of disjoint transpositions with perfect 
matchings on the complete graph on 2n vertices. The set of all such perfect matchings will be 
denoted PM2„. 

2 Communication complexity 

The first step in the proof is to go from the existence of an efficient communication protocol 
to the existence of a large subset of Alice's inputs such that two "hard" input distributions are 
distinguishable over that subset. The following lemma achieves this in a quite general setting; 
this is fairly standard, and similar (but somewhat more specific) statements have been proven in 
previous work [13l[9l[10]. For any subset S of Alice's inputs, and any joint distribution V on Alice 
and Bob's inputs, let V denote the distribution on Bob's inputs induced by conditioning on the 
event that Alice's input is in set S. 

Lemma 3. Let f : {0, 1}'" x {0, 1}" — t- {0, 1} be a function of Alice and Bob's distributed inputs. 
Let Dq, Di be distributions on the zero/one-valued inputs, respectively, that are each uniform over 
Alice's inputs, when averaged over Bob's inputs. AssuTne there is a one-way classical protocol that 
computes f with success probability 1 — e, for some e < 1/3, and uses c bits of communication. 
Then there exists an S Q {0, l}*" such that \S\ > e2™-^ and \\V^ - Pf ||i > 2(1 - 3e). 

Proof. By the Yao principle [26], for any distribution D on Alice and Bob's inputs, there is a 
deterministic one-way protocol V that communicates c bits and computes / correctly on a 1 — e 
fraction of the inputs (with respect to V). We choose the distribution V = -^ (^o + ^i)- Each 
potential message that Alice might send to Bob identifies a subset of her inputs. For each of Alice's 
inputs X, let Sx denote the subset of Alice's inputs identified by the message sent on input x. Let 
Outs{y) ■ {0, 1}" — )• {0, 1} be the function which takes the value that Bob outputs when he receives 
an input y and a message from Alice that corresponds to the subset S C {0, 1}"* of her inputs. Let 
Pxy, Qxy denote the probability that Alice and Bob receive inputs {x,y) under distributions Vq, Vi, 



respectively. Then, as they compute / correctly on at most a 1 — e fraction of the inputs under 
distribution T>, 

\xe{o,i}"^ ye{o,i}" J 

which implies 

Y^ Y^ OntsAy){qxy - Pxy) > 1 - 2e. 
xelo,!}™ j/e{o,i}" 

Let J- be the family of subsets of {0, 1}™ that corresponds to the partition of Alice's inputs into 
subsets determined by protocol V. As V communicates c bits, \J-\ < 2^^. Then 

seJ^j/ejo,!}" Vxes x(^s J 

which clearly implies 



E E 

SeTye{o,iy 



/ y Pxy 2-^ Qxy 

xeS xeS 



> 2(1 -2e). 



Now let Py, Qy denote the probability that Bob receives input y, conditioned on Alice's input being 
in set S, under distributions Vq, Vi respectively. Then 

Py = Pr[Bob's input is |/|Alice's input is in S] 

Prx),, [Bob's input is y n Alice's input is in S] 
Prxig [Alice's input is in S] 

_ ^"^ J2xesPxy 

\s\ 

and similarly for q^y, where we use the fact that both Dq ^-iid Pi are uniform over Alice's inputs, 
when averaged over Bob's inputs. Thus 

EP E |p?-,?l>2(l-2.). 

SeT 2/6{0,l}" 

or more succinctly 

E^K-^flli^2(l-2e). 

We now split the sum up depending on whether jS*! < s or jS*! > s, for some integer s to be 
determined. Then 

2(1 -2e) < y \^\\V^-Vfh+ y \^\\V^-Vf\U 

< 2 y ^+ max \\V^-V?\\i 

< 5 2^^^+^+ max llP^-pflli. 

5,|5|>s 



Thus there exists an 5 with |5| > s such that 

Po - ^f 111 > 2(1 - 2e - s 2"-""). 
Taking s = e 2'""'^, the proof is complete. D 

3 Combinatorial preliminaries 

We will need to calculate and estimate a number of combinatorial quantities to prove Theorem [2j 
We start with some easy calculations related to perfect matchings, which we state without proof. 

• The number of perfect matchings on the complete graph with 2n vertices is 

(2nV 
^2n:=^ = (2n-l)(2n-3)...l. 

• For any 2n-bit string x with Hamming weight 2k, and any integer d, 

iV2n2'^/2 ^'^/^'Y.^/^' if d is a multiple of 4 

(2fcj 

otherwise. 

• In particular, for any 2n-bit string x with Hamming weight 2k, 

MePM2„ V2fcj 

• For any pair of 2n-bit strings x and y, both with Hamming weight 2k, let tab be the number 
of bits where x is equal to a and y is equal to b. Then 

^ [Mx = x,My = y] = Nt,, Nt,, Nt,, Nt,, . 
MePMan 

This implies that 

V [Mx = x,My = y] = (^'"^^l ^2k-\.Ay\ ^2n-4fc+|xAy| if ^ A y\ is even 
MePM2„ ' lo if |x A 2/1 is odd, 

implying in turn that 

M^2„ 1° otherwise. 

We now turn to finding some technical upper bounds on quantities related to binomial coeffi- 
cients. 



Lemma 4. For any integers n,k > 0, 

/in\ /n\2/4ra\ 
\2n) \k) Ua,7 ^ 2^" 
/2nw2n\3 ~ 
{n)\2k) 



Proof. Evaluating all the binomial coeffients, the left-hand side is equal to 

(4n)!2nH {2ky.^ 2{n - k)]^ 

(2n)!6 kP{4k)\{n-k)\^{A{n-k))\' 

which can eventually be written out as 

2 / , .\ 2 /„ , \ 2 



22n 



/ 4n-l N2 / 4n-3 \ f 4n-5 \ f 2n+l \' 

\ 4n J \4n-2J \^4n-4^ ■ ■ ■ \2n+2 J 



( 4k-l \ { 4k-3 \ ( 2k+l \ / 4(n-fc)-l \ ( 4{n-k)-3 \ ( 2{n-k)+l \ ' 

V 4fc / l^4fc-2y • • • \2k+2J \ 4(n-k) J \4:{n-k)-2 J ■ ■ ■ \2(n-k)+2 J 



One can show with some tedious algebra that the denominator decreases with k for < A; < n/2, 
and that the overall maximum is therefore found at A: = n/2 (for n even; when n is odd, this 
maximum is not actually achieved). Substituting this value of k and simplifying, we need to show 

{An - l)(4n - 3)(4n - 5) . . . (2n + l)(2n)(2n - 2)(2n - 4) . . . (n + 2) 
(4n)(4n - 2)(4n - 4) . . . (2n + 2)(2n - l)(2n - 3)(2n - 5) . . . (n + 1) " 

This would follow from showing that, for any < a < n/2 — 1, 

(4n-4a- l)(4n-4a-3) 2n - 2a - 1 
(4n-4a)(4n-4a-2) " 2n - 2a ' 

which is equivalent to the inequality 

(4n - 4a - l)(4n - 4a - 3) < (4n - 4a - 2f. 

It can easily be verified that this inequality holds for all a. D 

Lemma 5. For any integer n > 0, 



n (n\ 2 



Elk 
(2: 



i2n 



A:=0 



/2n\ (2n\ 

\2k) \ n I 



2n\ fn\ ^ ('2k\ /2n - 2k\ (2n 



Proof. Using the identity 

\n J \kj \kj\ n — k I \2k 

the lemma reduces to the statement that 



(2) 



Emr::f)- 



fc=0 



which is equation (5.39) in [TT]. But identity ^ follows from applying a succession of "trinomial 
revision" identities |llj : 

2n\ fn\ ^ /2n\ /2n - k\ fn\ f2n\ (2n - k\ (2n - 2k\ (2n\ (2k\ (2n - 2k 



^ ) \^J V ^ / V "■ / V^/ V^/V ^ J \ n — k J \2kJ \k J \ n — k 

There is an alternative combinatorial proof of this identity, which we leave to the interested reader. 

D 

The following inequality is well-known, but we include a proof for completeness. 



Lemma 6. For any integers n,k > 0, 



k) - \2k 



Proof. There is a simple combinatorial proof of this statemenlo. The right-hand side counts the 
number of ways of choosing 2k elements from a set S of size 2n, while the left-hand side counts the 
number of ways of choosing k elements from the first n elements of S, and k elements from the last 
n elements of 5. The latter is clearly upper bounded by the former. D 

Finally, we will need to evaluate some sums involving binomial coefficients. 
Lemma 7. For any n >0, 



V W lO zfn<l, 



and also 



2k 



^^(n(n + 1)2") ifn>3 
1 ifn = 2 

ifn<l. 



Proof. We prove this lemma using the method of generating functions [llj. Consider the function 

/(x) := nx(l + x)"-i = a;-^(l + x)" = V A: (""jY 



\x''. 



The quantity X]a:(^^) {2k) ■'^'^'^ ^^ equal to the sum of the terms of this series that correspond to even 
k. The function ^ (/(x) -|- /(— x)) extracts precisely these terms. Thus 

Substituting x = 1 proves the first part of the lemma. For the second part, differentiate / again, 
and multiply by x, to obtain 

g{x) := nx(l + nx)(l + x)""^ = x— nx(l + x)""^ = y^ fc^( ^ )x^. 

(XX \ rC J 

k 

As before, considering ^ (^(x) -|- g{—x)) we get 

E ^' (2I) ^'' = I ^3{x) + gi-x)) = ^ ((1 + nx)(l + x)"-2 - (1 - nx)(l - x)"-^) . 
Substituting x = 1 proves the second part of the lemma. D 



Thanks to Ronald de Wolf for pointing this out. 
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4 Fourier analysis 

For a function / : {0, 1}" — )• M, we define the Fourier transform of / by 

for S Q [n]. Subsets of [n] are in obvious correspondence with n-bit strings, and we sometimes use 
the notation f{s) to imply the identification of S with its characteristic vector s. For any functions 
/, g : {0, 1}" — )• M, it is easy to show that 

E fi^)fiy)9i^ + y) = 2'" E 9{s)hsf. (3) 

x,y€{0,l}" SC[n] 

Let Wkif) be the Fourier weight of / at level k, i.e. Wkif) = Yls\s\=kfi^)'^- 



4.1 Krawtchouk polynomials 



We will use properties of the Krawtchouk polynomials to obtain our bounds. The /c'th Krawtchouk 
polynomial KJ^ is defined as the unique degree k polynomial satisfying 



i=0 ^ ^ 



x\ I n — X 
k — i 



for integer x, and the Krawtchouk transform of a function g : {0, 1, . . . ,n} — t- M is given by the 
function h : {0, 1, . . . , n} — t- M defined by 



1 " 
h{x) = -Y,Kl{x)g{k). 



2'^ 

fc=0 



Krawtchouk polynomials are important for us because, if / : {0, 1}" — )• R is a symmetric function, 
i.e. /(x) = ffdxl) for some g, then the Fourier transform of / is given by the Krawtchouk transform 

of 5: 



f{s) 



1 1 " / \ 1 " 

Yn E (-ir/(^) = ^E E (-irU(^) = ^E^i?(NiMfc)- 

a;e{0,l}" fc=0 \xe{0,l}",|a;|=A: / fc=0 



The Krawtchouk polynomials satisfy many identities and inequalities [191 116] . In particular, it 
holds that KJ!{x) = (— l)^i^^_^(x), and we have the orthogonality relation 



j2i^^K{-)Kix)=2-(^yrs. 



x=0 

We will need the following explicit expressions for some of the Krawtchouk polynomials: 

^ ^ [0 if X is odd. 

11 



For a derivation of the last expression, see |18j . Finally, from the symmetry relation 

one can deduce 

A1>(O)=0, AT(2) = ^0((„-2.)'-n). 

4.2 Upper bounds on Fourier weight 

We will use the following lemma of Kahn, Kalai and Linial [12], which follows from the Bonami- 
Beckner hypercontractive inequality [6ii5]. 

Lemma 8 (KKL Lemma [E]). Let f : {0,1}" — t- {—1,0,1} be a function that takes a nonzero 
value at p positions. Then, for any < 6 < 1, 

SC[n] 

If / is the characteristic function of a set, the KKL Lemma can be used to obtain quite tight 
bounds on the Fourier weight of / at both low and high levels, which we formalise as Lemma [9] 
below. Part (i) of this lemma is well-known (e.g. see |101I25]): however, part (ii) appears to be new 
(albeit not difficult). 

Lemma 9. Consider an arbitrary non-empty subset A C {0, 1}", let f be the characteristic function 
of A, and set 2~" = LJ.. Then, for any I < k < (ln2)a.' 

_2„/^(2eln2)a^^ 



(i) Wkif) < 2-^° { k J ' """"^ 



k 

Proof. By the KKL Lemma, we have 

Wkif) < (5-'=2-2"/(i+'5) 
for any A; > and any < 5 < 1. We now take 6 = -^^ for some < 7 < a/2, implying 

7) 



Wkif) ^ (- - 1) ' 2-'^"-^) < (-) ' 2-2(" 



Minimising over 7, we find that the minimum is achieved when 7 = 2TJ72' gi'^i'^g ^"^ upper bound 

Wkif) < 2-'- (^^^^)' - 2-2" ^^-^^"^ ' 

For the second part of the lemma, consider the function gix) = (— l)l^l/(x). By the first part, we 
have Wkig) < 2-2" ( (2ein2)a \ _ ^g ^^g^ ^^^g 



9iS) = ^ E (-l)^-^^'(-l)^-^"^/(^) = ^ E i-l)^^^sc^^fix) = fiSl, 
xe{o,i}" xe{o,i}" 

so Wkig) = Wn-kif)- The second part of the lemma follows. D 
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These bounds are almost tight. Consider the d-dimensional subspace 5 C {0, 1}" that consists 
of all bit strings that begin with n — d zeroes. Then the Fourier transform of S is uniform on the 
orthogonal subspace S-^ , which consists of all bit strings that end with d zeroes. It therefore holds 
that 



-^(^)-^"^''--i:h--©' 



\s\ 



where we use a standard bound on binomial coefficients, and as before define 2 " — gn- 

5 Proof of Theorem [2] 

Using Lemma [3l we will put a lower bound on the classical one-way communication complexity of 
the PM-Invariance problem. The two distributions we will consider are defined as follows. 

• T)q: X is picked uniformly at random consistent with |x| = n, and M is a perfect matching 
consistent with d{Mx, x) > n/8, but otherwise uniformly random. 

• Pi: X is picked uniformly at random consistent with |x| = n, and M is a perfect matching 
consistent with Mx = x, but otherwise uniformly random. 

Let A be an arbitrary subset of {0, 1}^". We will show that ||2?q — 2?^||i cannot be large unless 
A is small. To do this, we will show that both distributions are in fact close to uniform. 

In the case of Pq; this is quite straightforward. Let U denote the uniform distribution on perfect 
matchings on the complete graph with 2n vertices. Then, for any x G {0, l}'^" such that |x| = n, 

ll-nW TTW 9 "^ [d{Mx,x) <n/8] 2 ^ ^2d(n\(n-2d 

\\V, -C/||i-2 2^ — --p- 2^ 2 ^2dJU/2-d, 

the first equality here is just the fact that for any probability distributions p, q^ Yli \Pi ~ 1i\ — 
'^'^ip <n ili ~ Pi)- Ii^ tl^6 second equality, for each d < n/32, the summand counts the number of 
M G PM2„ such that d{Mx, x) = 4d (as discussed in Section [3l d{Mx, x) is a multiple of 4 for all 
M). This sum can be upper bounded by estimating 

ll^r-f/|k<i2«Aa(';) Y. (2',)^ A'"'" ^ rM<2V^2"(V-.H(V-)-i), 

where we use Lemma [6] in the penultimate inequality; in the last inequality, H is the binary entropy 
function H{x) = —x log2 x — {1 — x) log2(l — x), and we use the easy inequality („%) ^ 2"/-y/n. It 
can be verified that this quantity is exponentially small in n. Thus, for any A, we have 

1 

' ' xeA 

The case of Vi is more challenging. Let pM denote the probability under Vi that Bob gets input 
M, given that Alice's bit string was in A. Then 

Pm = Pr[Bob gets M \ Alice got something in A] 

\A\ Z. |{iv G PM2„ : Nx = x}\ N,4;),)\A\ ^} ^ 

= ^y„ , Pr[Mx = d. 

A^2nLy -e^ 
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We now attempt to upper bound ||P]'^ — C/||i by appealing to the £2 norm, using the simple inequality 



ELikil < VnJE"=i 



^" ^2 . 



W^-U 



=PM2„ ^" \ MePM2„ ^ Z71/ y A/ePM2n 



1 -"^lll = 

MePM2„ 
The interesting quantity under the square root is 

/2n\2 

^2" E ^M = -^y^ E P/^[^- = -]' 

MGPMzn ^^2nl,„/2; MePM2„ 



/2n\2 

^^ .:!2|.|, E E f{x)f{y)[Mx = x][My = y] 

^2n(„/2J 1^1 A/ePM2„x,ye{0,l}2", 

|x|=|y|=n 

/2n\2 



^2n(„/2) 1^1 \a;,y MePM2^ 

where we define / : {0, 1}^" — )• {0, 1} to be the characteristic function of A. Recalling that 
SA/ePM2„[-^^ = x,My = y] depends only on d(x,y), we want to upper bound a quantity of the 
form 

Y,fi^)f(.y)9id(.x,y)), 

x,y 

where, for z a multiple of 4, < z < 2n, by eqn. ([T]) 

2 , / , r"/2^^ ^ 



.^ ^2 ^2 _/^ (^/2)! (n-./2)! V_ 1 ^! ^4^ 

y\ ) z/2 n~z/2 \^2^/4(z/4)!2"/2~-/4(n/2-z/4)!y 2"Wn/2)!y2) 



n \ \ 1 



and g(z) = elsewhere. To find such a bound, it is convenient to use the Fourier expansion. 
Defining h : {0,1}^" -^ M by h{x) = g{\x\), by eqn. @ upper bounding A^2n EA/ePM2„ Pm is 
equivalent to proving an upper bound on 



/2nN2 



Vn) _2^n Y^ h{S)fiSf 



^2n(„/2) I^P SC[2n] 

We calculate 

2n . ,^2 "/2 ('n/2\^ , / \ '^/2 (n/2\'^ 

hiS) = iE^^(I^IM^) = 7Ji]I^E^4\"(l^l)^ = I^U/2 E^4\"(l^l)^. 

fc=0 V / ;• ;.^o (_2feJ ^ ' ^ k=0 \2k) 

This implies that the quantity we would like to upper bound is 

(2n\r>2n "/2 (n/2\'^ 

^- E ^M = 7Mf^ E E^lni5|)7^/(^)'- 

MePM2„ \n/2j\ I 5C[2n]fc=0 bfcj 
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The first thing to note about this sum is that the terms with |5| odd don't contribute anything; in 
fact, for odd x it holds that 

fc=0 \2k) 

To see this, recall that K'^{x) = (— l)^\Rr|"_^^(x), which means that all the terms in this sum 
cancel out, except when n is a multiple of 4 and k = n/4. But K'^{x) = when x is odd. We are 
therefore left with the quantity 

/2n\ n n/2 ('n/2^2 

22(a-n)A^^^^2„(2,)iA_^|^2.(/), (4) 

U/2J s=Ofc=0 \2k) 

where we set 2" = -r-ji-. We first turn to finding an upper bound on the inner sum 

n/2 (n/2\'^ 

j:A-(2,)i^. 

fc=0 \2k) 

We rewrite this using the symmetry relation for Krawtchouk polynomials to get 

n/2 .„/2n2 n/2 .„/2n2 

fc=0 bJ V2s; A:=0 ^ ^ l.2fcJ 

and apply Cauchy-Schwarz to give 

"/2 /n/2^2 , /n/2 . \\ /"/^ (2n\(n/2\'^^ ^'^ 



fc=0 bfcj V2s/ \fc=0 




'^'-"{:/2f'^r^ni 
1/2 2^ 



1/2 



/2nNl/2.2nNl/2 \^ f") 



('2n\l/2/2nAl/2' 



(5) 



where the first equality is the orthogonality relation for Krawtchouk polynomials, the second in- 
equality is Lemma m and the second equality is Lemma [SJ 

We will use this inequality to bound the overall sum ([3]); however, in order to obtain a stronger 
upper bound, we start by treating the cases s = and s = \ separately. For s = 0, we have 

(2n\ n/2 /n/2\2 /2n\ n/2 ln/2\^ n/2 

\n/2j k=0 [2k) ^n/2) k=0 ^ ^ \2k) k=0 ^ ^ 

where the inequality is Lemma [H In the case s = 1, 

i2n\ n/2 (n/2\^ U „^^ 0\^\2 f2n\ n/2 . , fn/2\'^ 

v2 ' 



...-.g g .|,„U),.,„> , X'^^^l^^ g (-) (,.. - s.r- - . 



\2k) 
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by Lemma[9]and the expression for the Krawtchouk polynomial worked out in Section HTTl Dropping 
the negative term and using Lemma HJ we obtain an upper bound of 

2((eln2)a)2 ^^^ ^^.^r,fn\_2{{eln2)affn'^ ^ n{n + 1) 



' I — n \ / 



n(2n-l)2"^' ' \2kJ n(2n - 1) \2 2 



where we use Lemma [7] to evaluate the sum. We therefore have 

yn/2) k=0 






We now bound the rest of the sum ([4]). First, note that these inequalities for s = 0, s = 1 also 
apply to s = n, s = n — 1 by symmetry considerations (the Krawtchouk polynomials are symmetric 
about s = n/2, as is Lemma [9]). We now apply inequality ([5]) to all of the other terms in the sum 
(HI) to obtain an upper bound of 



^2 /'2n\V2 n~2 



2((eln2)a)^ (-) ^ ,2.v ^2s(/) 

2n-l (%) ^ ^2nNl/2- 

Vn/2; s=2 Usj 

We are now ready to apply Lemma [9] to the terms in this sum such that either s or n — s is upper 
bounded by 2(lii2)a. This gives an upper bound on expression ([3]) of 

/9„x 1/2 / |i(ln2)a| o„ n-ri(ln2)«l 

2((eln2)a)^ f;) ^ / ^^^^^ 1 / (2eln2)a y- ^,, ^y ^2^(7) 

2n-l (%) ^ /2nNl/2 V 2s y ^ ,^ /2nNl/2 I ' 

where the factor of 2 in the first sum follows from using the symmetry about n/2 of Lemma [9j We 
find a bound for the sum over small values of s by simply lower bounding the binomial coefficients 
via the inequality (^) > (^) , which is valid for all s > 1: 

LlOn^H ^ / (2eln2)a y^ <\^(1Y /^(il^i^V' _ V /^(^l^l^V' 
^ (2n)i/2^ 2. ; -^UJ V s ) -^V ^/i^ J ■ 

Now, for any a < ", „ , we have 



eln2 

y./ (eln2)a y^^^ 1^^_ 



-s/8 ^ ^ 

4nV8(ni/8_l)- 



Finally, the sum over large values of s can be trivially upper bounded by noting that X]"=o ^2s(/) < 
1, and hence 



^^ /2nNl/2 - / 2n n1/2 " V |(ln2)a| 

s=ri(ln2)al \2s) \[(\n2)a\j 



Z^ /9„n1/2 - , 9„, X 1/2 - I inr,9^«l I 



note that here we assume that a = Q.{rJ'^^) without loss of generality. By Stirling's approximation, 

/'2n\l/2 , 

^/"„ s = ^!^-j=-v}'^ + o{\). The overall bound on N2n YliM&M2n P\i ^^^^ becomes, for any a < tj^, 

Vn/2/ ^ 



A/ePM2„ V ^ 



2nV8(nV8 _ 1) 
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1 -n(nVl6) 



+ n 



implying 

\\Vt-U\\i<lN2n Yl Pm-A ^(^+°(^)) <0-69 + o(l). 
Going back to the original inequality we were trying to prove, we have shown that, for all A such 

^7/16 

that \A\> i^'^-^^A^ , it holds that 

/ 1/4 \'/' 

11^^ - ^^lli < 11^^ - t^lli + \^\ - f^lli < 2"^^"^ + ^ + o(l) < 0.69 + o(l). 

Alice's input is of length m = log2 ( ^) = 2n — 0(log n) bits. Thus, taking c = "^^^ — 0(log n) and 
e = 0.21 — o(l) in Lemma[3l this implies that any classical one-way protocol that transmits at most 
"^^2 ~ O(logn) bits from Alice to Bob cannot compute PM- In variance with success probability 
greater than 0.79 + o(l). This completes the proof of Theorem [2j 

6 Conclusions 

We have given an example of a natural problem for which there is an exponential separation between 
one-way quantum and classical communication complexity. However, the problem of determining 
whether such a separation - or indeed any asymptotic separation - can exist for a total function 
still remains. 

We conjecture that the lower bound of Q{n7'^^) for the classical communication complexity of 
PM-Invariance is not tight, and the true lower bound is Q,[n^''^), matching the upper bound. It 
appears that it would suffice to obtain stronger upper bounds on the Krawtchouk polynomials to 
prove such a result. 

Finally, we mention an intriguing connection to coding theory. Alice's subset A C {0, 1}^" 
can be thought of as a codcl, in which case the quantity we upper bound is an exponentially 
decreasing function of the distance distribution of that code. There are a number of works that 
put constraints on distance distributions, and in particular show that for "large enough" codes, 
the distance distribution must be similar to that of a random code (e.g. see |151 [2]). Tight enough 
results of this form might suffice to prove our main result (as it is easy to verify that it holds for 
a random subset A). Indeed, in [T8], Linial and Samorodnitsky show that for large linear codes, 
the number of bit strings at distance n is (asymptotically) maximised by random codes. Note that 
this result does not depend on any information about the code's minimum distance. Extending 
the result of [18] in a suitable way to non-linear codes (i.e. general subsets of {0, 1}^") and other 
distances might allow a tight lower bound on the communication complexity of PM-Invariance 
to be proven. Conversely, our result might have implications for the understanding of distance 
distributions of general codes. 
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